Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          eus83SIfv0qot+uwl0tkwdRWQK5YkrcyQdCCJ03rS04=
Subject key identifier:   37:40:4E:B8:1B:F6:9E:46:1D:75:85:A8:38:DF:5F:4A:2F:94:29:55
Certificate issuer:       /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial:       0222C12909E3F0B5BACC1B36A875E97DB3D71CA1
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
Signing time:             Wed 14 Oct 2026 18:10:53 +0000
ROA not before:           Wed 14 Oct 2026 18:05:53 +0000
ROA not after:            Wed 13 Oct 2027 18:10:53 +0000
asID:                     267373
IP address blocks:        45.234.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:22:c1:29:09:e3:f0:b5:ba:cc:1b:36:a8:75:e9:7d:b3:d7:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
        Validity
            Not Before: Oct 14 18:05:53 2026 GMT
            Not After : Oct 13 18:10:53 2027 GMT
        Subject: CN=37404EB81BF69E461D7585A838DF5F4A2F942955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:b1:85:d9:48:66:fc:fd:18:25:a1:5c:9f:
                    c0:02:57:3b:74:39:e9:f0:59:db:d1:60:10:36:7c:
                    17:a0:55:33:29:72:11:6f:c8:27:0a:45:f3:4b:e9:
                    30:c2:d1:1b:da:76:4e:fe:65:89:6f:1b:2b:09:b7:
                    1d:1a:72:39:8a:db:40:21:21:fc:06:73:53:00:b1:
                    f3:cf:d8:4c:c4:b4:38:44:63:91:25:39:ee:69:a5:
                    ae:32:1a:62:a4:aa:77:79:b6:e0:e2:55:e7:d4:e3:
                    f6:47:9c:c4:09:2b:cf:3a:ae:73:84:10:fc:08:03:
                    58:32:18:e6:5f:b2:4f:49:a6:30:1b:d5:39:f1:71:
                    76:8e:5f:d6:25:90:42:1a:50:a5:f3:69:f7:41:f1:
                    69:45:87:47:f9:9f:f4:a2:6a:a6:10:49:65:5e:e0:
                    23:77:30:6d:e4:31:35:f0:76:0d:e3:bc:c8:06:75:
                    73:d8:e9:d6:12:6e:d0:bd:21:fa:76:4c:35:ab:a2:
                    e8:b5:e5:9e:2c:50:38:ce:00:3c:cf:95:7f:aa:66:
                    54:5a:d6:73:7f:ba:fc:73:db:51:03:bd:24:16:16:
                    5c:11:9c:00:f0:96:b7:62:85:51:d7:e7:12:8d:df:
                    4e:13:40:1d:d1:82:84:aa:5a:a3:cd:3f:c7:dd:f7:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:4E:B8:1B:F6:9E:46:1D:75:85:A8:38:DF:5F:4A:2F:94:29:55
            X509v3 Authority Key Identifier:
                keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:23:42:72:9e:be:62:ff:57:f0:27:4c:cb:78:24:17:57:10:
         04:bf:c9:3f:93:bb:e3:44:a2:24:21:ad:ee:25:12:af:01:35:
         ae:4f:3d:12:76:df:1a:70:cc:4a:6c:46:76:6f:58:56:61:06:
         b4:fe:e6:fd:89:72:7d:6a:b8:e5:c8:93:42:9f:20:00:70:fa:
         1d:d4:8c:bf:6c:4e:a3:38:02:96:96:f1:18:d8:02:c7:55:4f:
         1c:98:b2:a5:8e:50:88:cf:a3:4f:f8:6e:d7:cb:bf:db:a7:45:
         d7:56:c4:9c:41:2b:c9:42:cc:3d:94:6b:dd:4d:98:5e:f7:f4:
         ff:6c:53:40:74:b0:93:5d:c1:77:8d:40:74:ec:24:f6:8d:37:
         45:41:2e:46:a2:b1:c7:78:92:4d:14:74:c0:20:18:db:d8:03:
         50:69:da:bf:41:53:a4:01:03:cd:3b:a9:59:5d:b9:1e:00:cd:
         c2:2f:09:74:19:6b:3c:b6:2a:15:9d:ca:d2:2b:c6:0a:70:4e:
         fe:98:4d:9d:62:b3:4f:c9:25:19:2e:87:d9:87:2c:9b:8e:80:
         40:10:9f:4c:4f:55:67:78:0a:57:c8:d5:52:d9:89:23:09:10:
         1b:1a:44:eb:d3:10:97:4e:04:b8:3e:f4:dc:f1:be:07:45:72:
         a2:f6:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 04:48:43 2026 by rpki-client